Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/9be61c8c-ed3f-3d46-b118-16178d6c341f.roa
File: 9be61c8c-ed3f-3d46-b118-16178d6c341f.roa (raw, json)
Hash identifier: HnYJVmj1+2pPPB1Yfrc0qCPTFEJpX0sjESSx4oRfj8w=
Subject key identifier: D6:F6:36:EE:36:01:22:80:1C:CB:D4:DD:42:CC:63:58:A2:04:D5:BE
Certificate issuer: /CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
Certificate serial: 010D0C9F4328584290E3A752066E324B15D65900
Authority key identifier: A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/9be61c8c-ed3f-3d46-b118-16178d6c341f.roa
Signing time: Sun 16 Jul 2023 13:00:18 +0000
ROA not before: Sun 16 Jul 2023 13:00:18 +0000
ROA not after: Sat 14 Oct 2023 13:00:18 +0000
asID: 997
IP address blocks: 172.81.104.0/24 maxlen: 24
104.143.43.0/24 maxlen: 24
23.186.64.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:90:e3:a7:52:06:6e:32:4b:15:d6:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
Validity
Not Before: Jul 16 13:00:18 2023 GMT
Not After : Oct 14 13:00:18 2023 GMT
Subject: CN=706d4e42-a758-4939-a455-74abfdb7b3cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9b:53:3c:96:e8:2a:59:12:b4:da:dd:07:ae:
bf:ce:d7:df:4a:b0:26:13:63:77:c4:76:a6:59:11:
9d:2f:b9:e3:26:90:bd:bf:33:2a:c6:86:a5:95:d2:
f4:03:41:46:22:86:c6:94:93:e2:8e:85:9d:d2:0e:
f0:b2:9a:da:85:0a:ee:9f:e4:c3:35:0d:2b:20:d3:
ce:9e:92:34:86:a8:3d:28:00:7f:4b:17:d4:40:a0:
91:74:39:f7:47:26:ef:e7:65:6d:af:6d:e9:50:3a:
d4:f5:83:6b:16:8e:89:59:98:80:8d:46:4b:0c:9c:
c4:e7:bc:60:e2:07:13:27:d4:63:2e:94:56:5b:b6:
be:b9:04:18:32:bc:0a:97:3e:a9:9e:cd:8c:08:6b:
54:04:ac:d8:bd:cc:64:23:d2:28:c8:f7:63:2c:f4:
2e:82:07:03:bc:4c:23:42:2e:a1:62:1c:4b:b7:d0:
ad:25:1b:f2:a8:47:66:1f:da:8f:56:b7:99:62:38:
c0:5a:a0:20:16:b2:81:8e:a0:a9:de:82:fb:d5:09:
5c:9e:6c:40:7b:30:76:f8:7a:39:a7:c5:47:6a:11:
60:50:96:e8:9d:e0:bd:4b:33:d9:63:06:3a:72:59:
7e:5c:c5:86:07:29:11:c8:48:fa:62:02:02:9f:fa:
5a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F6:36:EE:36:01:22:80:1C:CB:D4:DD:42:CC:63:58:A2:04:D5:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/9be61c8c-ed3f-3d46-b118-16178d6c341f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/bc831f6b-71a6-46bb-9f64-2da80ccc244c.crl
X509v3 Authority Key Identifier:
keyid:A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.186.64.0/24
104.143.43.0/24
172.81.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:de:07:22:68:56:50:35:9e:3a:85:27:76:7d:9e:87:5e:78:
46:cc:58:28:44:b0:b3:c8:fb:5e:ad:ad:de:b1:b0:0d:f8:03:
6b:49:91:42:d7:18:e9:91:f7:9f:47:65:cd:46:67:25:dc:c9:
ef:69:bb:30:fd:34:32:e4:4c:59:4d:00:a4:2b:27:31:1b:ef:
ac:a2:56:7d:32:54:e3:53:1f:15:b2:49:e0:24:7c:95:49:02:
6c:c2:cc:5f:91:ca:82:26:40:91:7d:7f:ef:c7:1e:c0:80:c5:
fe:d2:20:ec:23:08:6d:39:07:06:88:24:40:c4:d6:c8:6d:70:
94:27:9d:77:fc:b8:10:76:4f:f4:8d:3d:c4:33:86:c7:ae:ba:
27:e9:cb:da:f8:1b:d8:fc:80:03:05:40:86:bc:b7:d1:dc:2c:
6c:03:d0:b7:df:c6:1a:6d:ad:19:a8:b9:c6:74:5e:70:97:35:
74:82:14:4e:ca:c1:92:aa:61:0c:3b:40:5d:3f:c8:e5:18:7b:
fe:22:da:ed:44:04:85:73:f3:48:47:0e:15:ee:b3:7f:31:4c:
95:30:6e:4d:37:f1:a3:ec:a9:c5:14:6c:7a:13:d7:76:96:78:
5b:65:e2:9f:f9:c1:8f:79:48:42:15:fe:58:fa:aa:b0:d5:41:
ab:85:a7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:55 2024 by rpki-client on console-ams.rpki-client.org